Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
81.524exploits catalogados
37.962CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.482Referência 24.284GitHub PoC 15.675VulnCheck XDB 9.136Nuclei 4.441Metasploit 3.506✓ só verificadosrecentespopularesrisco
81.524 exploits
Exploit-DB
Fortinet FortiOS_ FortiProxy_ and FortiSwitchManager 7.2.0 - Authentication bypass
An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an
100RISCO
abrir ↗Exploit-DB
Dell EMC iDRAC7/iDRAC8 2.52.52.52 - Remote Code Execution (RCE)
Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which could be used to execute
60RISCO
abrir ↗VulnCheck XDB
initial-access
Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code
100RISCO
abrir ↗Exploit-DB
Ethercreative Logs 3.0.3 - Path Traversal
The Logs plugin before 3.0.4 for Craft CMS allows remote attackers to read arbitrary files via input to actionStream in
28RISCO
abrir ↗GitHub PoC
Exploits Python cve-2019-9053– by HackHeart
An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achieve
35RISCO
abrir ↗VulnCheck XDB
infoleak
GLPI allows unauthenticated SQL injection through the inventory endpoint
78RISCO
abrir ↗Exploit-DB
ABB Cylon Aspect 3.08.02 (uploadDb.php) - Remote Code Execution
Remote Code Execution, RCE
48RISCO
abrir ↗Exploit-DB
Pymatgen 2024.1 - Remote Code Execution (RCE)
pymatgen arbitrary code execution when parsing a maliciously crafted JonesFaithfulTransformation transformation_string
48RISCO
abrir ↗Exploit-DB
ABB Cylon Aspect 3.07.02 (userManagement.php) - Weak Password Policy
Weak Password Rules/Strength
48RISCO
abrir ↗GitHub PoC
CMS Made Simple ≤ 2.2.9 SQL Injection Vulnerability CVE-2019-9053 is a vulnerability found in CMS Made Simple (CMSMS) versions up to 2.2.9, where the application is vulnerable to a blind time-based SQL injection
An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achieve
35RISCO
abrir ↗VulnCheck XDB
infoleak
Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion
85RISCO
abrir ↗Exploit-DB
Really Simple Security 9.1.1.1 - Authentication Bypass
Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass
85RISCO
abrir ↗Exploit-DB
ABB Cylon Aspect 3.08.02 (bbmdUpdate.php) - Remote Code Execution
Remote Code Execution, RCE
48RISCO
abrir ↗Exploit-DB
Cacti 1.2.26 - Remote Code Execution (RCE) (Authenticated)
Cacti RCE vulnerability when importing packages
85RISCO
abrir ↗GitHub PoC
Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion
Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion
85RISCO
abrir ↗Exploit-DB
ABB Cylon Aspect 3.08.02 (bbmdUpdate.php) - Remote Code Execution
Cross Site Scripting XSS
48RISCO
abrir ↗Exploit-DB
ABB Cylon Aspect 3.08.02 (escDevicesUpdate.php) - Denial of Service (DOS)
Denial of Service, DoS
41RISCO
abrir ↗Exploit-DB
Spring Boot common-user-management 0.1 - Remote Code Execution (RCE)
common-user-management Unrestricted File Upload Leading to Remote Code Execution (RCE)
41RISCO
abrir ↗Exploit-DB
Adapt Authoring Tool 0.11.3 - Remote Command Execution (RCE)
A NoSQL injection vulnerability in Adapt Learning Adapt Authoring Tool <= 0.11.3 allows unauthenticated attackers to res
48RISCO
abrir ↗Exploit-DB
ABB Cylon Aspect 3.08.02 (licenseUpload.php) - Stored Cross-Site Scripting
Cross Site Scripting XSS
48RISCO
abrir ↗Exploit-DB
ABB Cylon Aspect 3.08.02 - Cookie User Password Disclosure
Credentails Disclosure
41RISCO
abrir ↗Exploit-DB
Ivanti Connect Secure 22.7R2.5 - Remote Code Execution (RCE)
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7
100RISCO
abrir ↗Exploit-DB
IBMi Navigator 7.5 - Server Side Request Forgery (SSRF)
IBM i server-side request forgery
33RISCO
abrir ↗Exploit-DB
OpenCMS 17.0 - Stored Cross Site Scripting (XSS)
XWiki Platform XSS through conflict resolution
48RISCO
abrir ↗Exploit-DB
ABB Cylon Aspect 3.08.02 (licenseServerUpdate.php) - Stored Cross-Site Scripting
Cross Site Scripting XSS
48RISCO
abrir ↗GitHub PoC
CVE-2019-9053.
An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achieve
35RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.